JustProtectPc and Just Protect Pc

JustProtectPc is a misleading antivirus application that will install itself as an additional software on victims computer. Infected computers will experienced a corrupt system including a hardware and software malfunction. JustProtectPc or also called as Just Protect Pc virus will cause malicious activities on the compromised system such as pop-up advertisements and browser hijacking. Of all these annoyances, JustProtectPc will promote itself as the program that can bring back computer to its normal clean state. A registered version will be prompted to buy using their online payment processing web site. Remember, JustProtectPc is a must removed application that can bring nothing but harm and danger once installed on the computer.

Alias: Just Protect Pc

Damage Level: Medium

Systems Affected: Windows 9x, 2000, XP, Vista, Windows 7

JustProtectPc Removal Procedures

Manual Removal:
1. Press Ctrl+Alt+Del on keyboard to stop process associated to “JustProtectPc”. When Windows Task Manager opens, go to Processes Tab and find and end the following process:
antivirus.exe
wscsvc32.exe

2. You need to update your installed antivirus application to have the latest database.
3. Thoroughly scan the computer and any detected threats must be removed. If removal is prohibited, it is best to quarantine the infected item. Manually locating and deleting of malicious files should also be performed. Please see files below that are related to JustProtectPc Virus.
4. Registry entries created by JustProtectPc must also be remove from the Windows system. Please refer below for entries associated to the rogue program. [how to edit registry]
5. Exit registry editor.
6. Get rid of JustProtectPc start-up entry by going to Start > Run, type msconfig on the “Open” dialog box. A windows containing System Configuration Utility will be launched. Go to Startup tab and uncheck the following Start-up item(s):
antivirus.exe
wscsvc32.exe

7. Click Apply and restart Windows.

My JustProtectPc Removal Tool:
In order to completely remove the threat, click here to download and run Malwarebytes Anti-Malware. Sometimes, Trojans will block the downloading and installation of MBAM. If this happens, download it from a clean computer and rename the executable file before executing on the infected machine.

Using Portable SuperAntiSpyware:
To thoroughly remove the virus, it is best to do a separate scan of another security program so that other infected files not detected by anti-virus application can be remove as well. Click here to download and run SAS Portable Scanner.

Scan with Norton Power Eraser:
A free removal tool from Norton Antivirus was developed to remove unfamiliar threats without using the traditional AV signatures. Download the tool from this location and start scanning the computer for viruses.

Technical Details and Additional Information:

Malicious Files Added by JustProtectPc:

C:\Documents and Settings\malwarehelp.org\Local Settings\Temporary Internet Files\Content.IE5\MGJCX1Y1\wscsvc32[1].exe
C:\Documents and Settings\malwarehelp.org\Local Settings\Temp\winupd64x.exe
C:\Program Files\Antivirus\wscsvc32.exe
C:\Program Files\Antivirus\Antivirus.exe

JustProtectPc Registry Entries:

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\antivirus.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\wscsvc32.exe
HKEY_CLASSES_ROOT\avbho.avbhoapp.1
HKEY_CLASSES_ROOT\avbho.avbhoapp
HKEY_CLASSES_ROOT\CLSID\{9d541c6a-573b-4888-b35e-6816e68c3620}
HKEY_CLASSES_ROOT\Interface\{9692be2f-eb8f-49d9-a11c-c24c1ef734d5}
HKEY_CLASSES_ROOT\Interface\{967a494a-6aec-4555-9caf-fa6eb00acf91}
HKEY_CLASSES_ROOT\TypeLib\{65da0ce6-30d1-4144-a0b6-59bd01372e26}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Antivirus
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9d541c6a-573b-4888-b35e-6816e68c3620}
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{9d541c6a-573b-4888-b35e-6816e68c3620}

Alternative Removal Method for JustProtectPc and Just Protect Pc

Option 1 : Use Windows System Restore to return Windows to previous state

If JustProtectPc and Just Protect Pc enters the computer, there is a big chance that Windows files, registry entries and other essential components are also infected. System Restore can reinstate clean system files by restoring the configuration to an earlier date. The method also replaces compromised files with a clean version. If you have a saved restore point before JustProtectPc and Just Protect Pc infiltrates the PC, we highly encourage you to execute this procedure if none of the above works. You may proceed with Windows System Restore, click here to see the full procedure.